DEV Community

Cover image for Provide private storage for internal company documents
Taiwo Olabode
Taiwo Olabode

Posted on • Edited on

Provide private storage for internal company documents

What is a Storage account:
A Microsoft Azure storage account is a secure, scalable container managing diverse data types with robust redundancy and performance options, serving as the foundation for globally accessible cloud storage solutions.
The company needs storage for their offices and departments. This content is private to the company and shouldn't be shared without consent. This storage requires high availability if there's a regional outage. The company wants to use this storage to back up the public website storage.
In this article, we will be focusing on:
Create a storage account for the internal private company documents.

  • In the portal, search for and select Storage accounts.

  • Select + Create.

  • Select the Resource group created in the previous lab.

  • Set the Storage account name to private. Add an identifier to the name to ensure the name is unique.

  • Select Review, and then Create the storage account.

  • Wait for the storage account to deploy, and then select Go to resource.

  • In the storage account, in the Data management section, select the Redundancy blade.

  • Ensure Geo-redundant storage (GRS) is selected.

  • Refresh the page.

  • Review the primary and secondary location information.

  • Save your changes.

Create a private storage container for the corporate data.

  • In the storage account, in the Data storage section, select the Containers blade.

  • Select + Container.

  • Ensure the Name of the container is private.

  • Ensure the Public access level is Private (no anonymous access).

  • As you have time, review the Advanced settings, but take the defaults.

  • Select Create.

  • Select the container.

  • Select Upload.

  • Browse to files and select a file.

  • Upload the file.

  • Select the uploaded file

  • On the Overview tab, copy the URL.

  • Paste the URL into a new browser tab.

  • Verify the file doesn’t display and you receive an error.

  • Select your uploaded blob file and move to the Generate SAS tab.

  • Verify the Start and expiry date/time is for the next 24 hours.

  • Select Generate SAS token and URL.

  • Copy the Blob SAS URL to a new browser tab.

  • Verify you can access the file. If you have uploaded an image file it will display in the browser. Other file types will be downloaded.

  • Return to the storage account.

  • In the Overview section, notice the Default access tier is set to Hot.

  • In the Data management section, select the Lifecycle management blade

  • Select Add rule.

  • Set the Rule name to movetocool.

  • Set the Rule scope to Apply rule to all blobs in the storage account.

  • Select Next.

  • Ensure Last modified is selected.

  • Set More than (days ago) to 30.

  • In the Then drop-down select Move to cool storage.

  • As you have time, review other lifecycle options in the drop-down.

  • Add the rule.

  • In your storage account, create a new container called backup. Use the default values. Refer back to Lab 02a if you need detailed instructions.

Navigate to your publicwebsite storage account. This storage account was created in the previous exercise

  • In the Data management section, select the Object replication blade.

  • Select Create replication rules.

  • Set the Destination storage account to the private storage account.

  • Set the Source container to public and the Destination container to backup.

  • Create the replication rule.

  • Optionally, as you have time, upload a file to the public container. Return to the private storage account and refresh the backup container. Within a few minutes your public website file will appear in the backup folder.

Top comments (1)

Collapse
 
realcloudprojects profile image
SKILL.SCH

good job